Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033343a3a2f34372d3437203d3e203532343638.roa
File:                     323830343a326237383a383033343a3a2f34372d3437203d3e203532343638.roa (raw, json)
Hash identifier:          ikefXNcADWVHgggPC6pWx8qXnHwWdWNnTFfDdXID4EM=
Subject key identifier:   BF:0D:3B:C0:31:91:E9:10:FE:19:E7:E1:D1:BF:3A:95:2C:D7:D7:48
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       347301271F06341799119B558A7F694A71F021A6
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033343a3a2f34372d3437203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:42:06 +0000
ROA not before:           Fri 07 Mar 2025 20:37:06 +0000
ROA not after:            Fri 06 Mar 2026 20:42:06 +0000
asID:                     52468
IP address blocks:        2804:2b78:8034::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:01:27:1f:06:34:17:99:11:9b:55:8a:7f:69:4a:71:f0:21:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:37:06 2025 GMT
            Not After : Mar  6 20:42:06 2026 GMT
        Subject: CN=3082010A02820101009D94B8C1A4B693968F8379EF81E015184FCE827B2561C2247E84BEFB25FBB2EE4A387A9544286E7656CFFD354CAD33F71DEFA5A7BFA67AB276E33D70A7EA7984ACCEE8B273B04050138A32B6E60F7F731E6C1C0383F066BA553D5A20071210279EAE2767D1EE1016179622AEB4D7D51F3F28861BFC6A7EC334D2C246412BC8CB97D38F6BFC750DF09B5E2E14060816F87A4BCFCAB82048479C5E8382D197E8C46CCEB3C175336A4D6F65551BCC1D4833604DA565BD5FEA34F3BE84AC89E2711D95A41A2B8935AC75079FF9B5B72FFAE3DB1A8F3A0C075519241F63FA36D20D2807B7CFF611B76FB93651A80C293F04FD4CE68065A0C20B25B42D66A3EE8B03290203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:b8:c1:a4:b6:93:96:8f:83:79:ef:81:e0:
                    15:18:4f:ce:82:7b:25:61:c2:24:7e:84:be:fb:25:
                    fb:b2:ee:4a:38:7a:95:44:28:6e:76:56:cf:fd:35:
                    4c:ad:33:f7:1d:ef:a5:a7:bf:a6:7a:b2:76:e3:3d:
                    70:a7:ea:79:84:ac:ce:e8:b2:73:b0:40:50:13:8a:
                    32:b6:e6:0f:7f:73:1e:6c:1c:03:83:f0:66:ba:55:
                    3d:5a:20:07:12:10:27:9e:ae:27:67:d1:ee:10:16:
                    17:96:22:ae:b4:d7:d5:1f:3f:28:86:1b:fc:6a:7e:
                    c3:34:d2:c2:46:41:2b:c8:cb:97:d3:8f:6b:fc:75:
                    0d:f0:9b:5e:2e:14:06:08:16:f8:7a:4b:cf:ca:b8:
                    20:48:47:9c:5e:83:82:d1:97:e8:c4:6c:ce:b3:c1:
                    75:33:6a:4d:6f:65:55:1b:cc:1d:48:33:60:4d:a5:
                    65:bd:5f:ea:34:f3:be:84:ac:89:e2:71:1d:95:a4:
                    1a:2b:89:35:ac:75:07:9f:f9:b5:b7:2f:fa:e3:db:
                    1a:8f:3a:0c:07:55:19:24:1f:63:fa:36:d2:0d:28:
                    07:b7:cf:f6:11:b7:6f:b9:36:51:a8:0c:29:3f:04:
                    fd:4c:e6:80:65:a0:c2:0b:25:b4:2d:66:a3:ee:8b:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:3B:C0:31:91:E9:10:FE:19:E7:E1:D1:BF:3A:95:2C:D7:D7:48
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033343a3a2f34372d3437203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8034::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:73:bb:51:f2:2f:3b:8e:14:79:ef:b9:72:a0:9f:d6:8d:
         8b:65:49:af:d9:a2:aa:23:54:a1:97:2f:46:50:fb:c2:d0:e0:
         26:02:4b:d9:b7:ea:d0:4c:9e:c1:d5:c8:42:a5:ce:77:16:5e:
         a1:49:a5:ce:cf:b6:42:1c:4c:02:03:7b:54:ea:6c:51:b7:21:
         9e:31:bf:78:72:58:2a:b5:f8:dd:28:89:b5:68:0a:33:52:39:
         a6:cb:e5:42:b0:b6:b1:67:0c:36:d0:ef:e2:62:a9:51:63:fe:
         3f:4e:90:d2:dd:23:2a:09:2a:55:d1:f9:93:23:de:f0:ad:2c:
         c6:f9:8c:4f:5b:b5:05:7b:58:85:b2:d4:13:49:8f:07:91:71:
         88:6b:54:3f:e6:ed:30:6f:65:58:60:0e:2b:5c:85:2e:7d:9d:
         eb:76:4a:6c:1f:f2:dd:3e:15:1f:5d:fc:64:a8:b0:67:75:65:
         13:b6:5e:d0:db:d1:a5:14:80:cd:a1:7f:25:87:5f:e5:24:e4:
         30:89:82:09:f0:4c:18:43:55:61:26:9b:df:0b:a9:58:5d:6e:
         5c:f7:d9:13:34:38:37:56:0a:b2:a8:cd:78:fa:ae:ec:6a:dd:
         4b:02:ef:73:cc:a1:b7:ee:1a:a9:f8:68:16:1a:c2:2f:de:2d:
         79:84:04:6f
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUNHMBJx8GNBeZEZtVin9pSnHwIaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAzMDcyMDM3MDZaFw0yNjAzMDYyMDQyMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUQ5NEI4QzFBNEI2OTM5NjhG
ODM3OUVGODFFMDE1MTg0RkNFODI3QjI1NjFDMjI0N0U4NEJFRkIyNUZCQjJFRTRB
Mzg3QTk1NDQyODZFNzY1NkNGRkQzNTRDQUQzM0Y3MURFRkE1QTdCRkE2N0FCMjc2
RTMzRDcwQTdFQTc5ODRBQ0NFRThCMjczQjA0MDUwMTM4QTMyQjZFNjBGN0Y3MzFF
NkMxQzAzODNGMDY2QkE1NTNENUEyMDA3MTIxMDI3OUVBRTI3NjdEMUVFMTAxNjE3
OTYyMkFFQjREN0Q1MUYzRjI4ODYxQkZDNkE3RUMzMzREMkMyNDY0MTJCQzhDQjk3
RDM4RjZCRkM3NTBERjA5QjVFMkUxNDA2MDgxNkY4N0E0QkNGQ0FCODIwNDg0NzlD
NUU4MzgyRDE5N0U4QzQ2Q0NFQjNDMTc1MzM2QTRENkY2NTU1MUJDQzFENDgzMzYw
NERBNTY1QkQ1RkVBMzRGM0JFODRBQzg5RTI3MTFEOTVBNDFBMkI4OTM1QUM3NTA3
OUZGOUI1QjcyRkZBRTNEQjFBOEYzQTBDMDc1NTE5MjQxRjYzRkEzNkQyMEQyODA3
QjdDRkY2MTFCNzZGQjkzNjUxQTgwQzI5M0YwNEZENENFNjgwNjVBMEMyMEIyNUI0
MkQ2NkEzRUU4QjAzMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnZS4waS2k5aPg3nvgeAVGE/OgnslYcIkfoS++yX7su5KOHqVRChu
dlbP/TVMrTP3He+lp7+merJ24z1wp+p5hKzO6LJzsEBQE4oytuYPf3MebBwDg/Bm
ulU9WiAHEhAnnq4nZ9HuEBYXliKutNfVHz8ohhv8an7DNNLCRkEryMuX049r/HUN
8JteLhQGCBb4ekvPyrggSEecXoOC0ZfoxGzOs8F1M2pNb2VVG8wdSDNgTaVlvV/q
NPO+hKyJ4nEdlaQaK4k1rHUHn/m1ty/649sajzoMB1UZJB9j+jbSDSgHt8/2Ebdv
uTZRqAwpPwT9TOaAZaDCCyW0LWaj7osDKQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FL8NO8AxkekQ/hnn4dG/OpUs19dIMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMzMzQzYTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcBKAQreIA0MA0GCSqGSIb3DQEBCwUAA4IBAQCFPXO7UfIvO44Uee+5cqCf
1o2LZUmv2aKqI1Shly9GUPvC0OAmAkvZt+rQTJ7B1chCpc53Fl6hSaXOz7ZCHEwC
A3tU6mxRtyGeMb94clgqtfjdKIm1aAozUjmmy+VCsLaxZww20O/iYqlRY/4/TpDS
3SMqCSpV0fmTI97wrSzG+YxPW7UFe1iFstQTSY8HkXGIa1Q/5u0wb2VYYA4rXIUu
fZ3rdkpsH/LdPhUfXfxkqLBndWUTtl7Q29GlFIDNoX8lh1/lJOQwiYIJ8EwYQ1Vh
JpvfC6lYXW5c99kTNDg3VgqyqM14+q7sat1LAu9zzKG37hqp+GgWGsIv3i15hARv
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:56 2025 by rpki-client